← Back to PayloadFlatten

Privacy Policy

Last Updated: October 2026

1. Overview & Privacy-First Architecture

PayloadFlatten ("we", "our", or "the add-on") is built with a zero-knowledge, zero-egress architecture. The add-on is designed to parse and un-nest JSON payloads entirely within the user's private Google account sandbox. We do not operate backend databases that ingest, store, or monitor your spreadsheet data.

2. What Data We Process

  • Spreadsheet Contents & JSON Payloads: Processed 100% locally inside your browser via Google Apps Script (V8 runtime). This data NEVER leaves your Google Sheet and is NEVER sent to our servers or any third parties.
  • License Verification: If you activate a Pro license, only your license key string is transmitted to our Merchant of Record (Lemon Squeezy) to verify entitlement status. No spreadsheet rows, cell values, or document titles are ever included in this request.

3. Google API Limited Use Disclosure

PayloadFlatten's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Third-Party Services

We use Lemon Squeezy as our Merchant of Record for payment processing and license key fulfillment. When you purchase a license, your billing information is processed directly by Lemon Squeezy under their PCI-compliant privacy policy. We never see or store your payment card numbers.

5. Data Retention & Deletion

Because we do not store your spreadsheet data on external servers, uninstalling the add-on or removing the script immediately ceases all script execution. Cached license keys stored in Google's native PropertiesService can be cleared at any time from your spreadsheet settings.

6. Contact Us

If you have any questions or security inquiries regarding this policy, please reach out to us at: privacy@payloadflatten.com.